Privacy Policy — cricknex

Information We Collect

cricknex collects personal information from users in Bangladesh in order to provide a secure, compliant, and personalised platform experience. The types of data we collect fall into three broad categories: information you provide directly, information generated automatically through your use of the platform, and information received from verified third-party service providers.

1.1 Information You Provide Directly

When you register an account with cricknex or interact with our support team, you provide us with information that we need to operate your account and deliver our services. This includes:

• Identity information: Your full legal name as it appears on a government-issued identification document such as a National Identity Card (NID) or passport.
• Contact information: Your mobile phone number, email address, and residential address within Bangladesh.
• Date of birth: Required to verify that you meet the minimum age requirement of 18 years.
• Account credentials: Your chosen username and an encrypted version of your password. We never store your password in plain text.
• Payment information: The mobile financial service number (bKash, Nagad, Rocket, Upay) or bank account details you register for deposit and withdrawal purposes.
• Identity verification documents: Scanned copies or photographs of government-issued identification documents submitted during the Know Your Customer (KYC) verification process.
• Support communications: Records of any messages, chat transcripts, or emails exchanged between you and our customer support team.

1.2 Information Collected Automatically

When you access and use the cricknex platform, certain technical and behavioural data is collected automatically by our systems. This data is used for security monitoring, fraud prevention, platform performance optimisation, and regulatory compliance purposes.

• Device information: Device type, operating system, browser type and version, screen resolution, and device identifiers.
• Network information: IP address, approximate geographic location derived from IP, and internet service provider.
• Session data: Login timestamps, session duration, pages visited, features used, and navigation patterns within the platform.
• Betting and gaming activity: Records of all bets placed, games played, deposit and withdrawal transactions, and account balance movements.
• Cookie data: Functional and analytical cookie data as described in Section 4 of this Policy.

1.3 Information from Third-Party Providers

In certain circumstances, cricknex may receive supplementary information about you from trusted third-party service providers, including identity verification agencies, payment processors, fraud detection services, and game content providers. Such information is used solely to enhance the accuracy of our KYC process, improve fraud detection, or resolve payment disputes. It is handled under the same confidentiality obligations as data you provide directly.

How We Use Your Data

cricknex processes personal data only for specific, legitimate purposes directly related to operating a safe and compliant online gaming platform for players in Bangladesh. We do not process your data in ways that are incompatible with the purposes listed below.

Purpose	Data Used	Legal Basis
Account registration and management	Name, email, phone, date of birth, address	Contractual necessity
Age and identity verification (KYC)	ID documents, date of birth, name	Legal obligation
Processing deposits and withdrawals	Payment details, account balance records	Contractual necessity
Fraud prevention and security monitoring	IP address, device data, session data, transaction history	Legitimate interest
Responsible gaming compliance	Betting activity, deposit patterns, self-exclusion records	Legal obligation / Legitimate interest
Customer support	Support communications, account data	Contractual necessity
Platform analytics and improvement	Session data, usage patterns, cookie data	Legitimate interest
Promotional communications (opt-in only)	Email address, phone number, preferences	Consent

2.1 Promotional Communications

cricknex will only send you marketing communications — including bonus offers, seasonal promotions related to BPL, IPL, Eid, or Pohela Boishakh, and platform updates — if you have explicitly opted in to receive such communications during registration or via your account preferences. You may withdraw your consent and unsubscribe from all marketing communications at any time by updating your notification preferences within your account settings or by contacting our support team.

2.2 Automated Decision-Making

Certain decisions made by cricknex — such as flagging an account for fraud review, applying responsible gaming restrictions, or triggering an enhanced KYC check — are supported by automated processes. Where an automated decision has a significant effect on your account (for example, a temporary account suspension), you have the right to request human review of that decision by contacting our support team. We will acknowledge such requests within 2 business days.

Data Sharing & Third Parties

cricknex does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and always subject to appropriate contractual safeguards.

3.1 Service Providers and Data Processors

We engage a number of trusted third-party service providers to help us operate the cricknex platform. These providers process your data only on our behalf, under our instructions, and in accordance with data processing agreements that bind them to confidentiality and security obligations equivalent to those applied by cricknex. Categories of service providers with whom data may be shared include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard — for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification services used to validate government-issued identity documents.
• Fraud detection services: Specialised security vendors whose tools analyse transaction patterns and device data to identify suspicious activity.
• Game content providers: Certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session and game-round data necessary to deliver and settle game outcomes.
• Customer support platforms: Providers of live chat and ticketing infrastructure used to manage support interactions.
• Analytics providers: Platform analytics tools that process anonymised or pseudonymised session data to help us improve the user experience.

3.2 Legal and Regulatory Disclosures

cricknex may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or where such disclosure is necessary to protect the legal rights of cricknex, prevent fraud, or protect the safety of users and third parties. We will notify you of such a disclosure where we are legally permitted to do so.

3.3 Business Transfers

In the event that cricknex undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred as part of that transaction. You will be notified by a prominent platform-level notice prior to any such transfer, and your data will continue to be governed by the privacy standards described in this Policy.

Cookies & Tracking Technologies

cricknex uses cookies and similar tracking technologies to operate the platform correctly, maintain the security of your session, and gather anonymised analytical data that helps us understand how players interact with the site. This section explains what cookies we use, why we use them, and how you can control them.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember certain information about your session — such as whether you are logged in, your language preference, or items in a temporary game session state. Cookies themselves do not contain executable code and cannot carry viruses or malware.

4.2 Categories of Cookies Used by cricknex

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Authentication, session management, security tokens. Required for the platform to function.	No — essential to platform operation
Functional	Remembering your preferences such as display settings and notification preferences.	Yes — disabling may affect user experience
Analytical	Anonymised data on page visits, feature usage, and session flows to improve platform performance.	Yes — via browser settings
Fraud Prevention	Device fingerprinting and behavioural signals used to detect and prevent fraudulent account activity.	No — essential to platform security

4.3 Managing Your Cookie Preferences

You can manage or delete cookies at any time through your browser settings. Most modern browsers allow you to block or delete cookies via their privacy or security settings menus. Please be aware that disabling functional or analytical cookies may affect the performance of certain features on the cricknex platform. Disabling strictly necessary or fraud prevention cookies may prevent you from accessing your account altogether, as these are integral to session security.

cricknex does not deploy third-party advertising networks, retargeting pixels, or social media tracking cookies on its platform. Any analytical tools used are configured to anonymise IP addresses and do not link session data back to individually identifiable users.

Data Security Measures

cricknex takes the security of your personal data seriously. We maintain a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

5.1 Technical Safeguards

• Transport Layer Security: All data transmitted between your browser or app and our servers is encrypted using TLS 1.2 or higher, rendered as 256-bit SSL encryption in practice.
• Password hashing: Account passwords are stored using a strong cryptographic hashing algorithm with per-user salting. Plain-text passwords are never stored or logged.
• Access controls: Access to systems holding personal data is restricted to authorised personnel on a strict need-to-know basis, enforced by role-based access control policies.
• Intrusion detection: Our infrastructure is monitored continuously by automated intrusion detection systems that alert our security team to anomalous activity in real time.
• Regular security assessments: cricknex conducts periodic vulnerability assessments and penetration testing of its platform infrastructure.
• Data backups: Personal data is backed up regularly to geographically separated secure storage, ensuring availability in the event of a system failure.

5.2 Organisational Safeguards

• All staff with access to personal data undergo privacy and data security training at onboarding and on an annual basis thereafter.
• Third-party service providers with access to user data are contractually required to maintain security standards equivalent to those applied by cricknex.
• A designated data protection point of contact within the cricknex team is responsible for overseeing compliance with this Privacy Policy and responding to user data requests.

5.3 Security Incident Response

In the unlikely event of a data security incident that may affect your personal information, cricknex will notify affected users via the email address registered to their account within a reasonable timeframe after the incident is confirmed and assessed. The notification will describe the nature of the incident, the categories of data affected, and the steps being taken to address it. If you believe your account security has been compromised, contact our support team immediately via live chat or email support@cricknex (plain text — not a clickable link).

Data Retention & Deletion

cricknex retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable platform obligations, legal requirements, or legitimate interests in fraud prevention and dispute resolution. The following retention periods apply as a general guide:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Fraud prevention, dispute resolution
KYC / identity documents	Duration of account + 5 years after closure	Regulatory compliance, age verification records
Transaction records	7 years from transaction date	Financial record-keeping obligations
Betting and gaming activity logs	5 years from date of activity	Dispute resolution, responsible gaming monitoring
Support communications	3 years from last interaction	Quality assurance, dispute reference
Session and device logs	12 months from session date	Security monitoring, fraud detection
Marketing preferences	Until opt-out, then deleted within 30 days	Consent-based processing

6.1 Account Deletion Requests

If you close your cricknex account and request deletion of your personal data, we will process your request in accordance with the retention periods above. Data that must be retained for legal, regulatory, or fraud prevention purposes will be archived securely and will not be used for any other purpose. Data that is no longer required will be securely deleted or irreversibly anonymised. Deletion requests can be submitted by contacting our support team via live chat or by emailing support@cricknex (plain text — not a clickable link).

6.2 Inactive Accounts

Accounts that have been inactive (no login, no betting activity, no deposit or withdrawal) for a continuous period of 24 months may be flagged for dormancy review. cricknex will attempt to notify you via the email address on your account before taking any action on a dormant account. Any real-money balance remaining in a dormant account will be handled in accordance with our Terms & Conditions.

Your Privacy Rights

cricknex respects your rights over your personal data. Subject to applicable legal limitations — including obligations that require us to retain certain records regardless of your request — you hold the following rights in relation to the personal data we hold about you.

7.1 Summary of Your Rights

• Right of Access: You have the right to request a copy of the personal data cricknex holds about you. We will respond to access requests within 10 business days of receipt and provide the data in a clear, readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections (such as updating a phone number or email address) can be made directly within your account settings.
• Right to Erasure: Subject to our legal retention obligations, you have the right to request that we delete personal data we hold about you. We will confirm whether erasure is possible given our obligations, and proceed with deletion where no legal or contractual reason prevents it.
• Right to Restriction of Processing: You may request that we temporarily restrict processing of your data — for example, while a dispute or accuracy challenge is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and carried out by automated means, you may request that we provide your data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of our legitimate interests — for example, certain analytical or fraud-detection processing. We will assess your objection and cease the relevant processing unless we can demonstrate a compelling legitimate ground that overrides your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as receiving marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

7.2 How to Exercise Your Rights

To exercise any of the rights listed above, please contact the cricknex data protection team by emailing support@cricknex (plain text — not a clickable link) with the subject line "Data Rights Request". Please include your registered account username and a description of your request. We may need to verify your identity before processing your request to protect against unauthorised access to another person's data.

Policy Updates & Contact

cricknex reviews this Privacy Policy on a regular basis and reserves the right to update or amend it at any time to reflect changes in platform practices, applicable law, or the services we offer. The effective date at the top of this page will be updated whenever a revision is made. We encourage you to revisit this page periodically to stay informed about how your data is protected.

8.1 Notification of Material Changes

Where an amendment to this Privacy Policy represents a material change to how your personal data is processed — particularly any change that reduces your existing privacy protections or introduces new categories of data processing — cricknex will notify registered users via a prominent platform-level notification displayed upon login. Such notifications will be displayed for a minimum of 14 days following the publication of the revised Policy.

8.2 Governing Language

This Privacy Policy is written and maintained in English. Should any translated version be made available for informational purposes, the English-language version shall be the authoritative text in the event of any discrepancy or dispute regarding interpretation.

8.3 Contact Information

If you have any questions, concerns, or feedback regarding this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 7, please contact us using the details below. Email is the preferred channel for all privacy-related enquiries.